Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information stored or processed on information systems used to perform contractual obligations. This includes ensuring all technical, administrative, and physical safeguards mandated by the NIST framework are fully deployed, monitored, and documented to meet federal cybersecurity requirements for Controlled Unclassified Information. The subcontractor must establish a compliant environment that prevents unauthorized access, disclosure, or alteration of sensitive data throughout the contract lifecycle. Performance will be conducted under the oversight of the Department of Defense, with the work tied to Land Supplier Ops Vehicle Support, and must adhere to the NAICS code 541512 for computer systems design services. The solicitation is open for responses until August 20, 2026, with all compliance activities expected to be completed in alignment with federal standards. While no specific location is designated for performance, the contractor must ensure their IT infrastructure and operations meet all security requirements regardless of geographic placement, and must be prepared to demonstrate continuous compliance through audits, assessments, or reporting as needed by the government.